Play
You must login to view this content
Aggregator
INC
1 month 2 weeks ago
You must login to view this content
cohenido
INC
1 month 2 weeks ago
You must login to view this content
cohenido
New TCLBanker malware self-spreads over WhatsApp and Outlook
1 month 2 weeks ago
A new trojan named TCLBanker, which targets 59 banking, fintech, and cryptocurrency platforms, uses a trojanized MSI installer for Logitech AI Prompt Builder to infect systems. [...]
Bill Toulas
Ivanti customers confront yet another actively exploited zero-day
1 month 2 weeks ago
Attackers are hitting a frequent target in the network edge space, intruding victim networks through a defect in a widely used mobile endpoint security product.
The post Ivanti customers confront yet another actively exploited zero-day appeared first on CyberScoop.
Matt Kapko
Hackers Use Fake Claude AI Site to Infect Users With New Beagle Malware
1 month 2 weeks ago
Researchers have discovered a new malvertising campaign using a fake Claude AI website to plant a new, undocumented backdoor named Beagle on user devices.
Deeba Ahmed
Iranian government hackers using Chaos ransomware as cover, researchers say
1 month 2 weeks ago
Incident responders from cybersecurity firm Rapid7 published a report about a recent intrusion that initially appeared to be a Chaos ransomware attack but was later discovered to be an attack attributed to MuddyWater, an Iranian APT group tied to the country’s Ministry of Intelligence and Security (MOIS).
Nation-state actors exploit Palo Alto PAN-OS zero-day for weeks
1 month 2 weeks ago
Palo Alto says hackers exploited PAN-OS zero-day CVE-2026-0300 for weeks, gaining root access to exposed firewalls and hiding traces. Palo Alto Networks warned that suspected state-sponsored hackers have been exploiting the critical PAN-OS zero-day CVE-2026-0300 for nearly a month. After exploiting the flaw, attackers deployed tunneling tools such as EarthWorm and ReverseSocks5, used stolen credentials […]
Pierluigi Paganini
After Replacing TeamPCP Malware, 'PCPJack' Steals Cloud Secrets
1 month 2 weeks ago
PCPJack makes innovative use of parquet files for stealthy, pre-validated target discovery as it canvasses multiple cloud environments.
Nate Nelson
INC
1 month 2 weeks ago
You must login to view this content
cohenido
Building for the future
1 month 2 weeks ago
This afternoon, we sent the following email to our global team. One of our core values at Cloudflare is transparency, and we believe it's important that you hear this directly from us because it’s a major moment at Cloudflare.
Matthew Prince
Trump officials are steering a cybersecurity scholarship program toward AI
1 month 2 weeks ago
The latest development has thrown scholars for a curveball, and has some worried about being “left out to dry” when it comes to job positions.
The post Trump officials are steering a cybersecurity scholarship program toward AI appeared first on CyberScoop.
Tim Starks
Ransom House
1 month 2 weeks ago
You must login to view this content
cohenido
Has CISA Finally Found Its New Leader in Tom Parker?
1 month 2 weeks ago
Dark Reading investigates rumors that Tom Parker, a board room "operator" and longtime cyber exec, could be next in line to take over CISA.
Becky Bracken
Железный депутат с паспортом ворвался в мэрию: чиновникам пришлось отчитываться перед машиной за новый интернет
1 month 2 weeks ago
Киберпанк окончательно пришел в политику.
New PCPJack worm steals credentials, cleans TeamPCP infections
1 month 2 weeks ago
A new malware framework called PCPJack is stealing credentials from exposed cloud infrastructure while actively removing TeamPCP's access to the systems. [...]
Bill Toulas
Грибной трип в коралловых рифах. Зачем учёные «накурили» рыб и почему результат удивил даже их
1 month 2 weeks ago
Такого уровня миролюбия в этой среде не фиксировали никогда.
Ivanti Warns of New EPMM Zero-Day Exploited Using Credentials Stolen in January Attacks
1 month 2 weeks ago
Ivanti has issued an urgent security advisory for its Endpoint Manager Mobile (EPMM) product, disclosing five vulnerabilities including one that is actively exploited in the wild.
Dark Web Informer
U.S. CISA adds a flaw in Ivanti Endpoint Manager Mobile (EPMM) to its Known Exploited Vulnerabilities catalog
1 month 2 weeks ago
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in Ivanti Endpoint Manager Mobile (EPMM) to its Known Exploited Vulnerabilities catalog The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a flaw in the Ivanti Endpoint Manager Mobile (EPMM), tracked as CVE-2026-6973 (CVSS score of 7.1), to its Known Exploited Vulnerabilities (KEV) catalog. Ivanti warns customers […]
Pierluigi Paganini
Australia warns of ClickFix attacks pushing Vidar Stealer malware
1 month 2 weeks ago
The Australian Cyber Security Center (ACSC) is warning organizations of an ongoing malware campaign using the ClickFix social engineering technique to distribute the Vidar Stealer info-stealing malware. [...]
Bill Toulas